Will require a new login for all users, but a deploy does that anyway since sessions are stored in memory currently ðĪŠ
+1
-1
Diff
round #0
+1
-1
apps/appview/src/lib/app-context.ts
+1
-1
apps/appview/src/lib/app-context.ts
···
78
78
client_name: "atBB Forum",
79
79
client_uri: oauthUrl,
80
80
redirect_uris: [`${oauthUrl}/api/auth/callback`],
81
-
scope: "atproto transition:generic",
81
+
scope: "atproto include:space.atbb.authFull rpc:app.bsky.actor.getProfile?aud=did:web:api.bsky.app%23bsky_appview",
82
82
grant_types: ["authorization_code", "refresh_token"],
83
83
response_types: ["code"],
84
84
application_type: "web",
History
1 round
0 comments
malpercio.dev
submitted
#0
1 commit
expand
collapse
feat: constrain oauth scopes
expand 0 comments
closed without merging